[squid-users] Data tricking implementation is on ICAP side or Squid side?

[John Zhu]

Hi, All,

I have a wired issue. I setup the  Squid and ICAP.   When ICAP (in RespMod) sends response body (any file types, most of time are large size files) in a relative slow speed to squid,  if the time elapses longer than 1 minute, the browser will close the session and fail the downloading, the squid log shows the error of TCP_MISS_ABORTED/206

Here are the configuration.  I am new to squid.

==> /usr/local/squid/var/logs/access.log <==
1613593651.769  59962 172.90.1.1 TCP_MISS_ABORTED/206 3635 GET https://pfpt-my.sharepoint.com/personal/jzhu_company _com/_layouts/15/download.aspx? - HIER_DIRECT/13.107.136.9 application/pdf


acl SSL_ports port 443
acl Safe_ports port 80    # http
acl Safe_ports port 21    # ftp
acl Safe_ports port 443       # https
acl Safe_ports port 70    # gopher
acl Safe_ports port 210       # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280       # http-mgmt
acl Safe_ports port 488       # gss-http
acl Safe_ports port 591       # filemaker
acl Safe_ports port 777       # multiling http
acl CONNECT method CONNECT
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost manager
http_access deny manager
http_access allow all

# This is to help with the development process only
#cache deny all


cache_mem 1024 MB
maximum_object_size 200 MB
cache_swap_low 90
cache_swap_high 95
quick_abort_min -1

refresh_pattern ^ftp:     1440   20%    10080
refresh_pattern ^gopher:   1440   0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0    0% 0
refresh_pattern (Release|Packages(.gz)*)$      0       20%     2880
refresh_pattern .     0  20%    4320

# Docker-compose setup
icap_enable on
icap_io_timeout 600 seconds
icap_connect_timeout 600 seconds

icap_service service_req reqmod_precache bypass=1 icap://icapserver:1344/req
icap_service service_resp respmod_precache bypass=1 icap://icapserver:1344/resp
adaptation_access service_req allow all
adaptation_access service_resp allow all


Thank you all,

John Zhu

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20210218/82e357fe/attachment.htm>